Cybersecurity Fundamentals Flashcards
6 cards from real CSOC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Cybersecurity Fundamentals flashcards as text
What is the CIA triad in cybersecurity and what do the three components represent?
Answer: Confidentiality, Integrity, and Availability — the three core properties that security controls aim to protect
The CIA triad is the foundational model for information security. Confidentiality ensures data is accessible only to authorised parties; Integrity ensures data is accurate and unaltered; Availability ensures systems and data are accessible when needed.
What is the difference between a vulnerability and an exploit in cybersecurity?
Answer: A vulnerability is a weakness in a system; an exploit is the code or technique used to take advantage of that vulnerability
A vulnerability is a weakness or flaw in a system, software, or process. An exploit is the specific code, technique, or method that an attacker uses to take advantage of that vulnerability to compromise a system.
What is a 'zero-day vulnerability'?
Answer: A vulnerability that is unknown to the software vendor and for which no patch is yet available
A zero-day vulnerability is one that is unknown to the software developer or vendor, meaning there is no available patch or fix. Attackers who discover or purchase zero-days can exploit them before any defence is possible.
What is the purpose of network segmentation in cybersecurity?
Answer: To divide a network into isolated segments so that a breach in one segment does not automatically compromise the entire network
Network segmentation limits lateral movement by attackers within a compromised network. By isolating segments, a breach in one area is contained, preventing attackers from easily accessing all systems and data.
What is a 'man-in-the-middle' (MITM) attack?
Answer: An attack where the attacker secretly intercepts and potentially alters communications between two parties who believe they are communicating directly
In a MITM attack, the attacker inserts themselves between two communicating parties, intercepting and potentially altering the data without the knowledge of either party. This can be used to steal credentials, session tokens, or sensitive data.
What is the principle of 'least privilege' in cybersecurity?
Answer: Users and systems should be granted only the minimum access rights required to perform their legitimate functions
The principle of least privilege limits access rights to only what is necessary for a user or system to perform its specific role. This reduces the attack surface and limits the potential damage from compromised accounts.